Microsoft MVP, Cloud First

ALL ABOUT MICROSOFT GDPR STRATEGIES (…WITH NAV SUPPORT)

“ALL ABOUT” MICROSOFT GDPR STRATEGIES (…WITH NAV SUPPORT)

Hi guys,

the deadline is approaching … it lacks a little … and today we can also talkabout NAV (only NAV was missing and expected..).. in this post i want to summary all the GDPR strategies of Microsoft published to date.

GDPR with NAV WHITEPAPER IS READY !!

Today the long-awaited WHITEPAPER for NAV has been published … (about 600 people have asked me about this document) … and so now that it’s out, good reading to everyone!

Summary of publications by Topics

ABOUT GDPR

GDPR on PARTNER NETWORK

GDPR for AZURE

GDPR for SQL SERVER

GDPR for OFFICE 365

GDPR for CLOUD

GDPR ASSESMENTS PAGES

GDPR COMPLIANCE MANAGER

GDPR for NAV

ABOUT GDPR

“May 25, 2018: a new era begins for data privacy”

“On this date in a little less than a year, the new European Union (EU) data protection law will be implemented, replacing the old Data Protection Directive, which has been in effect since 1995. The new law, known as the General Data Protection Regulation (GDPR), gives individuals greater control over their personal data and imposes many new obligations on organizations that collect, handle, or analyze personal data.”

SQL Information Protection (SQL IP) introduces a set of advanced services and new SQL capabilities, forming a new information protection paradigm in SQL aimed at protecting the data, not just the database:

The new General Data Protection Regulation (GDPR) is the most significant change to European Union (EU) privacy law in two decades. The GDPR requires that organizations respect and protect personal data – no matter where it is sent, processed or stored. Complying with the GDPR will not be easy. To simplify your path to compliance, Microsoft is committing to be GDPR compliant across our cloud services when enforcement begins on May 25, 2018.

GDPR is part of our holistic cloud compliance investments

We are committed to our principles of cloud trust – across security, privacy, transparency and compliance. We have a broad portfolio of cloud services that address the rigorous security and privacy demands of our customers, who comprise over 90 percent of Fortune 500 companies. As the GDPR enforcement begins, here is what else you can expect from us:

*Compliance Manager is a dashboard that provides a summary of your data protection and compliance stature and recommendations to improve data protection and compliance. This is a recommendation, it is up to you to evaluate its effectiveness in your regulatory environment prior to implementation. Recommendations from Compliance Manager should not be interpreted as a guarantee of compliance.”

As mentioned in an earlier blog post, Microsoft is dedicated to helping our partners and customers meet the requirements of the GDPR. By May 2018, Dynamics NAV 2018, Dynamics NAV 2017, Dynamics NAV 2016, and Dynamcis NAV 2015 will be updated with tools to help you get GDPR compliant. The March cumulative updates have just been made available and provide the first round of updates for you. We have prepared a Dynamics NAV whitepaper that will help you prepare for compliance. Get it here.

The following links provide additional information and will be updated over time:

Data Classification is only the basic requirement in order to define your product to be totally GDPR-compliant. What we need right now in NAV?

One of the key aims of the GDPR is to empower individuals and give them control over their personal data. For having a good GDPR-compliance, we need to have features to satisfy at least these GDPR articles and topics:

Providing a quick way to retrieve sensitive data in the entire database (for example, if your old contact asks you to retrieve all his sensitive data you have in your system, you need to have a quick way to retrieve them).

Providing a quick way to rectify sensitive data (for example, change of a contact data: you need to change this data in the entire database and documents).

Providing a quick and automated way to mask or delete sensitive data (if your old contact asks you to immediately delete all his sensitive data in your database, you need to remove them or cypher them).

Provide a way to export all sensitive data of an individual in a standard format (CSV or XML) for data portability.

Providing a centralized way where launching all these GDPR tasks, log them, log GDPR incoming requests and action performed on the database.

We’ll have something similar before the May 25? Or we’ll have to develop all by ourself ? …..we are waiting answers directly from Microsoft about these topics ! Let you know ASAP !